MALICIOUS — CRITICAL
centoplay[.]cc
The domain centoplay.cc is currently listed as offline but retains a full set of indicators that classify it as a high‑risk crypto‑scam phishing vector.
- VirusTotal
- 16/95
- Blocklists
- No stored match
- 可用性
- 隐形 · 可达 · HTTP 666
Do not enter credentials, seed phrases, payment details, or personal information on this domain.
Jump to section
centoplay.cc — 隐形 · 可达 (HTTP 666). 品牌冒充:Genericcrypto; 诈骗类型:Crypto Scam. 证据摘要: VirusTotal 16/95 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLScan malicious verdict; Spamhaus DBL_PHISH; PhishDestroy score 100/100. 注册商: NiceNIC.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
Evidence Analysis
The domain centoplay.cc is currently listed as offline but retains a full set of indicators that classify it as a high‑risk crypto‑scam phishing vector. Registration data shows the domain was created on 27 October 2025 through NiceNIC International Group Co., Limited, and its authoritative nameservers are carrera.ns.cloudflare.com and yevgen.ns.cloudflare.com, confirming use of Cloudflare’s DNS service. DNS resolution points to IP address 172.67.201.165, which belongs to Cloudflare’s AS13335 network located in the United States. The site presented an SSL certificate issued by Google Trust Services under the WE1 root, indicating that HTTPS was correctly configured before takedown.
HTTP requests to the host returned an unconventional status code 666, a technique often employed to bypass naïve filters. The page title captured by crawlers reads “Centoplay: Most Popular Online Crypto Casino Based on Blockchain,” consistent with the Gambler Scam phishing kit and the broader classification of a crypto scam. Threat intelligence sources corroborate the malicious intent: PhishDestroy has blocked the domain, it appears on one additional security blocklist, and AlienVault OTX includes it in a single pulse. VirusTotal analysis shows 16 of 95 scanning engines flagged the domain as malicious.
Independent reputation services assign extremely low trust scores—Gridinsoft 1/100 and Scamadviser 1/100—further confirming the fraudulent nature. While the site is offline, the infrastructure elements remain active and could be repurposed for other campaigns. Defenders should add centoplay.cc to DNS and URL filtering lists, block its resolving IP 172.67.201.165 at the network perimeter, and ensure endpoint protection solutions are updated to include the observed signatures. Continuous monitoring of Cloudflare‑hosted IP ranges for similar anomalous HTTP status codes and low‑trust SSL certificates is advised to detect any re‑use of this infrastructure.
数据覆盖范围14 recorded checks
安全信号
网络安全情报 Registrar context
威胁响应 Pipeline
公共封禁名单状态
Latest Classified Outcome 2026-08-09 01:51:22 UTC
所用技术 · 1 identified
Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 置信度 100%VirusTotal 分析
存档证据
网站性能分析
Google PageSpeed Insights — mobile performance audit of centoplay.cc · checked Apr 23, 2026
证据与外部报告Independent lookups and source reports
Victim safety and official reportingImmediate actions and verified reporting channels
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。